Home / mailings [USN-8936-1] PHP vulnerabilities
Posted on 19 October 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-8936-1
October 19, 2026
php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in PHP.
Software Description:
- php8.5: HTML-embedded scripting language interpreter
- php8.3: HTML-embedded scripting language interpreter
- php8.1: HTML-embedded scripting language interpreter
- php7.4: HTML-embedded scripting language interpreter
- php7.2: HTML-embedded scripting language interpreter
- php7.0: HTML-embedded scripting language interpreter
- php5: HTML-embedded scripting language interpreter
Details:
It was discovered that PHP did not properly validate the size of MySQL
server packets in the mysqlnd driver. A malicious server could possibly use
this issue to cause PHP to crash, resulting in a denial of service. This
issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu
24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2025-1218)
It was discovered that PHP incorrectly handled response buffer sizes in the
SOAP HTTP client. A malicious server could possibly use this issue to cause
PHP to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2025-14181)
It was discovered that PHP incorrectly handled certain TAR archive headers
in the Phar extension. An attacker could possibly use this issue to inject
arbitrary files into a crafted archive. (CVE-2026-6103)
It was discovered that PHP did not limit recursion depth when parsing
certain SOAP requests. A remote attacker could possibly use this issue to
cause PHP to crash, resulting in a denial of service. (CVE-2026-91765)
It was discovered that PHP incorrectly handled authentication headers when
following HTTP redirects. A remote attacker could possibly use this issue
to obtain sensitive information. (CVE-2026-91766)
It was discovered that PHP incorrectly handled wildcard names in TLS server
certificates. A malicious server could possibly use this issue to cause PHP
to crash, resulting in a denial of service. This issue did not affect
Ubuntu 14.04 LTS. (CVE-2026-91767)
It was discovered that PHP incorrectly validated IPv6 client addresses in
the FastCGI client access check. A remote attacker could possibly use this
issue to bypass access restrictions. This issue did not affect Ubuntu 14.04
LTS. (CVE-2026-91768)
It was discovered that PHP incorrectly performed TLS peer name
verification. A remote attacker could possibly use this issue to
impersonate a trusted server. (CVE-2026-91769)
It was discovered that PHP incorrectly handled certain stream filter
options. An attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-92842)
It was discovered that PHP incorrectly handled empty Location headers when
following HTTP redirects. A malicious server could possibly use this issue
to redirect the client to an unintended location. This issue did not affect
Ubuntu 14.04 LTS. (CVE-2026-93682)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.10
libapache2-mod-php8.5 8.5.9-0ubuntu2
libphp8.5-embed 8.5.9-0ubuntu2
php8.5-cgi 8.5.9-0ubuntu2
php8.5-cli 8.5.9-0ubuntu2
php8.5-common 8.5.9-0ubuntu2
php8.5-fpm 8.5.9-0ubuntu2
php8.5-litespeed 8.5.9-0ubuntu2
php8.5-mysql 8.5.9-0ubuntu2
php8.5-phpdbg 8.5.9-0ubuntu2
php8.5-soap 8.5.9-0ubuntu2
Ubuntu 26.04 LTS
libapache2-mod-php8.5 8.5.4-0ubuntu1.4
libphp8.5-embed 8.5.4-0ubuntu1.4
php8.5-cgi 8.5.4-0ubuntu1.4
php8.5-cli 8.5.4-0ubuntu1.4
php8.5-common 8.5.4-0ubuntu1.4
php8.5-fpm 8.5.4-0ubuntu1.4
php8.5-litespeed 8.5.4-0ubuntu1.4
php8.5-mysql 8.5.4-0ubuntu1.4
php8.5-phpdbg 8.5.4-0ubuntu1.4
php8.5-soap 8.5.4-0ubuntu1.4
Ubuntu 24.04 LTS
libapache2-mod-php8.3 8.3.6-0ubuntu0.24.04.12
libphp8.3-embed 8.3.6-0ubuntu0.24.04.12
php8.3-cgi 8.3.6-0ubuntu0.24.04.12
php8.3-cli 8.3.6-0ubuntu0.24.04.12
php8.3-common 8.3.6-0ubuntu0.24.04.12
php8.3-fpm 8.3.6-0ubuntu0.24.04.12
php8.3-mysql 8.3.6-0ubuntu0.24.04.12
php8.3-phpdbg 8.3.6-0ubuntu0.24.04.12
php8.3-soap 8.3.6-0ubuntu0.24.04.12
Ubuntu 22.04 LTS
libapache2-mod-php8.1 8.1.2-1ubuntu2.27
libphp8.1-embed 8.1.2-1ubuntu2.27
php8.1-cgi 8.1.2-1ubuntu2.27
php8.1-cli 8.1.2-1ubuntu2.27
php8.1-common 8.1.2-1ubuntu2.27
php8.1-fpm 8.1.2-1ubuntu2.27
php8.1-mysql 8.1.2-1ubuntu2.27
php8.1-phpdbg 8.1.2-1ubuntu2.27
php8.1-soap 8.1.2-1ubuntu2.27
Ubuntu 20.04 LTS
libapache2-mod-php7.4 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
libphp7.4-embed 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-cgi 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-cli 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-common 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-fpm 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-mysql 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-phpdbg 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
php7.4-soap 7.4.3-4ubuntu2.29+esm4
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libapache2-mod-php7.2 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
libphp7.2-embed 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-cgi 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-cli 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-common 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-fpm 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-phpdbg 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
php7.2-soap 7.2.24-0ubuntu0.18.04.17+esm13
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libapache2-mod-php7.0 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
libphp7.0-embed 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-cgi 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-cli 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-common 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-fpm 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-phpdbg 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
php7.0-soap 7.0.33-0ubuntu0.16.04.16+esm21
Available with Ubuntu Pro
Ubuntu 14.04 LTS
libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
libapache2-mod-php5filter 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
libphp5-embed 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
php5-cgi 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
php5-cli 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
php5-common 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
php5-fpm 5.5.9+dfsg-1ubuntu4.29+esm17
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8936-1
CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765,
CVE-2026-91766, CVE-2026-91767, CVE-2026-91768, CVE-2026-91769,
CVE-2026-92842, CVE-2026-93682
Package Information:
https://launchpad.net/ubuntu/+source/php8.5/8.5.9-0ubuntu2
https://launchpad.net/ubuntu/+source/php8.5/8.5.4-0ubuntu1.4
https://launchpad.net/ubuntu/+source/php8.3/8.3.6-0ubuntu0.24.04.12
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.27
--===============0940471261233359228==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
